CVE

Id
27394  
CVE No.
CVE-2007-4037  
Status
Candidate  
Description
** DISPUTED ** Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled.  
Phase
Assigned (20070727)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
281793 27394 CVE-2007-4037 BUGTRAQ:20070726 Guidance Software response to iSEC report on EnCase  View
281794 27394 CVE-2007-4037 URL:http://www.securityfocus.com/archive/1/archive/1/474727/100/0/threaded  View
281795 27394 CVE-2007-4037 BUGTRAQ:20070727 Re: Guidance Software response to iSEC report on EnCase (fwd)  View
281796 27394 CVE-2007-4037 URL:http://www.securityfocus.com/archive/1/archive/1/474750/100/0/threaded  View
281797 27394 CVE-2007-4037 BUGTRAQ:20070726 Re: Guidance Software response to iSEC report on EnCase  View
281798 27394 CVE-2007-4037 URL:http://www.securityfocus.com/archive/1/archive/1/474809/100/0/threaded  View
281799 27394 CVE-2007-4037 BUGTRAQ:20070802 RE: Re: Guidance Software response to iSEC report on EnCase  View
281800 27394 CVE-2007-4037 URL:http://www.securityfocus.com/archive/1/archive/1/475335/100/0/threaded  View
281801 27394 CVE-2007-4037 MISC:http://www.blackhat.com/html/bh-usa-07/bh-usa-07-speakers.html#Palmer  View
281802 27394 CVE-2007-4037 MISC:http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf  View
281803 27394 CVE-2007-4037 BID:25100  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55497 JVNDB-2007-004189 Mozilla におけるクロスブラウザスクリプティング攻撃を実行される脆弱性 Mozilla は、引数の挿入により、クロスブラウザスクリプティング攻撃を実行される、および任意のコマンドを実行される脆弱性が存在します。 CVE-2007-4039 27394 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004189.html  View